Cyber Security Analyst

Space Dynamics Laboratory•North Logan, UT

About The Position

Space Dynamics Laboratory (SDL) is seeking a mid-level Cybersecurity Analyst to join their Corporate Information Security team. This role is crucial for driving Governance, Risk, and Compliance (GRC) initiatives, ensuring SDL maintains its CMMC certification and adheres to security standards for national defense and space exploration. The ideal candidate will translate complex federal requirements into actionable security strategies.

Requirements

5+ years of direct experience in cybersecurity, with at least 3 years focused specifically on GRC
Bachelor’s degree in cybersecurity or a related field
Strong working knowledge of NIST SP 800-171, CMMC, NIST SP 800-53, RMF, etc.
Must hold a DoW 8570/8140 IAT Level II or above certification (Security+ or equivalent)
Proven ability to analyze complex technical environments and map them to regulatory control requirements
Exceptional technical writing skills for policy documentation and the ability to present risk-based findings to non-technical stakeholders
Must be a U.S. citizen with the ability to obtain and maintain a U.S. Government security clearance

Nice To Haves

Master’s degree in cybersecurity or related field
CISSP, CMMC Certified Professional, CMMC Certified Assessor
Experience supporting preparations for a DIBCAC or C3PAO assessment
Familiarity with the Risk Management Framework (RMF), JSIG, or DISA STIGs within classified environments
Experience using GRC tools (e.g., Archer, FutureFeed, Telos) or using scripting (PowerShell/Python) to automate compliance reporting and data collection
Understanding of FedRAMP requirements and securing cloud environments (GCC High, AWS GovCloud)
General familiarity with SIEM, EDR, and vulnerability scanning tools to better understand the technical controls being audited

Responsibilities

Support internal audit efforts and self-assessments to ensure continuous compliance with CMMC 2.0 and NIST SP 800-171
Conduct comprehensive security risk assessments for corporate systems and third-party vendors, identifying gaps and recommending mitigation strategies
Draft, review, and maintain corporate security policies, standards, and procedures to ensure they reflect current regulatory requirements and organizational goals
Manage the POA&M process, tracking the remediation of identified vulnerabilities and compliance gaps across the enterprise
Serve as a subject matter expert for internal teams, providing guidance on security controls and compliance requirements for new projects and technologies
Assist in the development and delivery of security training programs to foster a culture of compliance across the organization